02实验手册hcrse207-bgp advance指导书

1、认证 R&S 系列HCIE-R&SIP网络工程师实验指导手册版本:3.0技术非经本公司播。技术，任何2018。 保留一切权利。和个人不得擅自摘抄、本文档内容的部分或全部，并不得以传商标和其他商标均为技术的商标。本文档提及的其他所有商标或商标，由各自的所有人拥有。注意您的产品、服务或特性等应受公司商业合同和条款的约束，本文档中描述的全部或部分产品、服务或特性可能不在您的或使用范围之内。除非合同另有约定，公司对本文档内容不做任何明示或暗示的或保证。由于产品版本升级或其他原因，本文档内容会不定期进行更新。除非另有约定，本文档仅作为使用指导，本文档中的所有陈述、信息和建议不任何明示或暗示的担保。技术总

2、部办公楼地址：市龙岗区坂田：518129：h专有和信息技术第 1页认证体系介绍培养经验及对行业发展的深刻理解，基于认证体系是公司凭借多年“平台生态”，围绕“”协同的新技术架构，打造包含架构认证、开发者认证、行业认证三大类认证的认证体系，是业界唯一覆盖全技术领域的认证体系。依托公司雄厚的技术实力和专业的培训体系，认证考虑到不同客户对R&S技术不同层次的需求，致力于为客户提供实战性、专业化的技术认证。HCIE-R&S（Certifiedernetwork Expert-Routing & Switching ，认证网络通信工程师R&S方向）是对企业网络级知识和技能的认证。目的是帮助企业网络高级工程

3、师搭建完整的大型复杂企业网络，支撑企业所需的语音、无线、云、安全和等应用全面集成到网络之中，满足企业各种应用对网络的使用需求。同时能够提供完整的故障排除能力，可根据企业和网络技术发展来规划企业网络，提高安全性、可用性和可靠性。认证协助您打开行业之窗，开启改变，屹立在R&S网络世界的潮头浪尖！第 2页第 3页目录1 BGP Advance 实验4实验介绍41.1关于本实验4实验目的4实验组网介绍5实验规划51.1.11.1.21.1.31.1.4实验任务配置71.2配置思路7配置步骤及验证81.2.11.2.2配置参考211.3R1 的配置21R2 的配置24R3 的配置27R4 的配置29R5

4、 的配置31R6 的配置34R7 的配置35R8 的配置38思考题391.4第 4页1BGP Advance 实验实验介绍关于本实验本实验通过配置以及使用 BGP 的各种工具，熟悉并掌握常见的 BGP 应用场景及属性特性用法。1.1.2 实验目的掌握路由聚合的原则和方法掌握路由反射器的原理和配置方法掌握 BGP 认证的配置方法掌握团体属性以及 Community-Filter 的原理和使用方法掌握 BGP 负载分担的配置方法属性 BGP 常见属性的用途以及用法第 5页1.1.3 实验组网介绍图 1-1 BGP Advance 实验拓扑图1.1.4 实验规划设备接口参数设计设备端口端口地址R1G

5、E0/0/0IPv4:10.0.12.1/24 IPv6:2000:1201/120GE0/0/1IPv4:10.0.13.1/24 IPv6:2000:1301/120Loack 0IPv4:10.0.1.1/32 IPv6:2000:1/128Vlanif1IPv4:221.12.128.1/24Vlanif2IPv4:115.192.0.1/24Vlanif3IPv4:10.1.1.1/24第 6页IPv6: 2000:0:0:11:1/64R2GE0/0/0IPv4:10.0.12.2/24 IPv6:2000:1202/120GE0/0/1IPv4:10.0.24.2/24 IPv6

6、:2000:2402/120Loack 0IPv4:10.0.2.2/32 IPv6:2000:2/128R3GE0/0/0IPv4:10.0.13.3/24 IPv6:2000:1303/120GE0/0/1IPv4:10.0.35.3/24 IPv6:2000:3503/120Loack 0IPv4:10.0.3.3/32 IPv6:2000:3/128R4GE0/0/0IPv4:10.0.46.4/24 IPv6:2000:4604/120GE0/0/1IPv4:10.0.24.4/24 IPv6:2000:2404/120Loack 0IPv4:10.0.4.4/32 IPv6:200

7、0:4/128R5GE0/0/0IPv4:10.0.35.5/24 IPv6:2000:3505/120GE0/0/1IPv4:10.0.58.5/24 IPv6:2000:5805/120Loack 0IPv4:10.0.5.5/32 IPv6:2000:5/128R6GE0/0/0IPv4:10.0.67.6/24 IPv6:2000:6706/120GE0/0/1IPv4:10.0.46.6/24 IPv6:2000:4606/120第 7页实验任务配置配置思路配置设备接口 IPv4 和 IPv6 地址。在 AS 100 使用 OSPF 和 OSPFv3 做为 IGP 协议。Loack

8、0IPv4:10.0.6.6/32 IPv6:2000:6/128Vlanif1IPv4: 10.1.6.1/24R7GE0/0/0IPv4:10.0.67.7/24 IPv6:2000:6707/120GE0/0/1IPv4:10.0.78.7/24 IPv6:2000:7807/120Loack 0IPv4:10.0.7.7/32 IPv6:2000:7/128Vlanif1IPv4:10.1.7.1/24Vlanif2IPv6:2000:0:0:70:1Vlanif3IPv6:2000:0:0:71:1Vlanif4IPv6:2000:0:0:72:1Vlanif5IPv6:2000:0

9、:0:73:1R8GE0/0/0IPv4:10.0.78.8/24 IPv6:2000:7808/120GE0/0/1IPv4:10.0.58.8/24 IPv6:2000:5808/120Loack 0IPv4:10.0.8.8/32 IPv6:2000:8/128Vlanif1IPv4: 10.1.8.1/24第 8页3.各直连路由器之间建立IBGP 或EBGP 邻居关系；IBGP 邻居使用Loack 口建立邻居关系，EBGP 采用直连接口建立邻居关系，AS 100 的两台出口路由器 R4 和 R5 需要对邻居进行验证。R2 和 R3 分别作为 R4 和 R5 的反射器，同时 R2 和 R

10、3 又作为 R1 的客户机。所有设备上直连的网段全部宣告到 BGP 当中 ，由于 AS 200 和 AS 400 为不同 ISP, 而221.12.128.1/24 和 115.192.0.0/24 分属两个 ISP，为了实现不用 ISP 的用户拥有 IP 地址的服务器的需求，故要求：1)221.12.128.1/24 的路由仅通告到 AS 2002)115.192.0.0/24 的路由仅通告到 AS 400对应 ISP 所此外，为了不让 ISP 之间互访的流量经过 AS 100，AS 100 不将从 AS 200 学习到的路由通告到 AS 400 当中去，反之亦然。（仅针对 IPv4 路由条

11、目）注：需通过 Community 属性实现。6.AS 1002000:0:0:70: /64、2000:0:0:71: /64、2000:0:0:72: /64 和 2000:0:0:73: /64这四个网段，同时需做到尽量减小这几个网络震荡对整个网络的影响以及防止环路的发生。7.要求 R1 上的 10.1.1.0/24 网段份。10.1.7.0/24 时能够充分利用链路带宽，并且做到冗余备1.2.2 配置步骤及验证步骤 1 配置设备接口 IP 地址按照实验规划配置各设备的 IPv4 及 IPv6 地址，以 R1 的接口为例。#syssysname R1R1ipv6R1erface Giga

12、bitEthernet 0/0/0R1-GigabitEthernet0/0/0ip address 10.0.12.1 24 R1-GigabitEthernet0/0/0ipv6 enableR1-GigabitEthernet0/0/0ipv6 address 2000:1201 120步骤 2 配置 IGP 路由协议配置 OSPF 协议，以 R1 为例。 # 在 R1 上配置 OSPF 协议 R1ospf 1R1-ospf-1area 0第 9页R1-ospf-1-area-0.0.0.0quitR1-ospf-1quit R1ospfv3 1R1-ospfv3-1router-id

13、10.0.1.1R1-ospfv3-1quitR1R1-LoR1-LoR1-Loerface Loack 0ack0ospf en area 0ack0ospfv3 1 area 0 ack0quitR1GigabitEthernet0/0/0R1-GigabitEthernet0/0/0ospfv3 1 area 0 R1-GigabitEthernet0/0/0ospf enable area 0 R1-GigabitEthernet0/0/0quitR1 GigabitEthernet0/0/1R1-GigabitEthernet0/0/1ospf en area 0 R1-Gigabi

14、tEthernet0/0/1ospfv3 1 area 0 R1-GigabitEthernet0/0/1quit结果验证#查看 IPv4 邻居关系R1display ospf peerOSPF Pros 1 with Router ID 10.0.1.1NeighborsArea 0.0.0.0erface 10.0.12.1(GigabitEthernet0/0/0)s neighborsRouter ID: 10.0.2.2Address: 10.0.12.2Se: Full Mode:Nbr is Mastriority: 1DR: 10.0.12.1 BDR: 10.0.12.2 M

15、TU: 0Dead timer due in 36 secRetrans timererval: 5Neighup for 00:08:49Authentication Sequence: 0 第 10页NeighborsArea 0.0.0.0erface 10.0.13.1(GigabitEthernet0/0/1)s neighborsRouter ID: 10.0.3.3Address: 10.0.13.3Se: Full Mode:Nbr is Mastriority: 1DR: 10.0.13.1 BDR: 10.0.13.3 MTU: 0Dead timer due in 32

16、secRetrans timererval: 5Neighup for 00:06:27Authentication Sequence: 0 #查看 IPv4 OSPF 路由表R1display ip routing-table protocol ospfRoute Flags: R - relay, D - download to fibPublic routing table : OSPFDestinations : 8Routes : 8OSPF routing table sus : Destinations : 8Routes : 8Destination/MaskProtoPreC

17、ostFlags NextHoperface10.0.2.2/32OSPF101D10.0.12.2GigabitEthernet0/0/010.0.3.3/32OSPF101D10.0.13.3GigabitEthernet0/0/110.0.4.4/32OSPF102D10.0.12.2GigabitEthernet0/0/010.0.5.5/32OSPF102D10.0.13.3GigabitEthernet0/0/110.0.24.0/24OSPF102D10.0.12.2GigabitEthernet0/0/0第 11页10.0.35.0/24OSPF102D10.0.13.3Gig

18、abitEthernet0/0/110.0.46.0/24OSPF103D10.0.12.2GigabitEthernet0/0/010.0.58.0/24OSPF103D10.0.13.3GigabitEthernet0/0/1OSPF routing table sus : Destinations : 0Routes : 0#查看 IPv6 邻居关系R1display ospfv3 peerOSPFv3 Pros (1)OSPFv3 Area (0.0.0.0)Neighbor ID10.0.2.210.0.3.3Pri11SeFull/Backup Full/BackupDead Ti

19、meerfaceInstance ID0000:00:35 GE0/0/000:00:38 GE0/0/1#查看 IPv6 OSPFV3 邻居路由表（以下内容仅保留关键部分）R1display ipv6 routing-table protocol ospfv3 Public Routing Table : OSPFv3Summary Count : 11OSPFv3 Routing Tables Sus : Summary Count : 8DestinationNextHopCost: 2000:2: FE80:2E0:FC: 1PrefixLength : 128ED3:22C2Pref

20、erenceProtocol TunnelID Flags: 10: OSPFv3: 0 x0RelayNextHop : :erface: GigabitEthernet0/0/0: DDestinationNextHop Cost: 2000:3: FE80:2E0:FC: 1PrefixLength : 128Preference10EF1:7B55Protocol: OSPFv3第 12页RelayNextHop : :TunnelIDFlags: 0 x0: Derface: GigabitEthernet0/0/1DestinationNextHop Cost: 2000:4: F

21、E80:2E0:FC: 2PrefixLength : 128ED3:22C2PreferenceProtocol TunnelIDFlags: 10: OSPFv3: 0 x0RelayNextHop : :erface: GigabitEthernet0/0/0: DDestinationNextHopCost: 2000:5: FE80:2E0:FC: 2PrefixLength : 128EF1:7B55PreferenceProtocol TunnelID Flags: 10: OSPFv3: 0 x0: DRelayNextHop : :erface: GigabitEtherne

22、t0/0/1DestinationNextHop Cost: 2000:2400: FE80:2E0:FC: 2PrefixLength : 120ED3:22C2PreferenceProtocolTunnelID Flags: 10: OSPFv3: 0 x0RelayNextHop : :erface: GigabitEthernet0/0/0: DDestinationNextHopCost: 2000:3500: FE80:2E0:FC: 2PrefixLength : 120EF1:7B55PreferenceProtocol TunnelID Flags: 10: OSPFv3:

23、 0 x0: DRelayNextHop : :erface: GigabitEthernet0/0/1DestinationNextHopCost: 2000:4600: FE80:2E0:FC: 3PrefixLength : 120ED3:22C2PreferenceProtocol TunnelID Flags: 10: OSPFv3: 0 x0RelayNextHop : :erface: GigabitEthernet0/0/0: DDestinationNextHop Cost: 2000:5800: FE80:2E0:FC: 3PrefixLength : 120EF1:7B5

24、5PreferenceProtocolTunnelID Flags: 10: OSPFv3: 0 x0: DRelayNextHop : :erface: GigabitEthernet0/0/1第 13页步骤 3 配置 BGP 邻居关系配置 BGP 邻居关系，AS100 内用 Loack 0 建立 IBGP 邻居关系，其他 EBGP 邻居关系均使用直连接口地址建立。此外，出于安全性考虑，R4 和 R5 需对其 EBGP 邻居进行认证，以R4和 R6 为例。# 在 R4 上配置 BGP 邻居R4 bgp 100R4-bgprouter-id 10.0.4.4R4-bgppeer 10.0.46

25、.6 as-number 200 R4-bgp peer 10.0.46.6 password cipher R4-bgppeer 2000:4606 as-number 200 R4-bgp peer 2000:4606 password cipher R4-bgpipv6-family unicastR4-bgp-af-ipv6peer 2000:4606 enable在 R6 上配置 BGP 邻居R6bgp 200R6-bgprouter-id 10.0.6.6R6-bgppeer 10.0.46.4 as-number 100 R6-bgppeer 10.0.46.4 password

26、 cipher R6-bgppeer 2000:4604 as-number 100 R6-bgppeer 2000:4604 password cipher R6-bgpipv6-family unicastR6-bgp-af-ipv6peer 2000:4604 enable结果验证#查看 BGP 邻居关系建立情况R4display bgp peerBGP local router ID : 10.0.4.4Local AS number : 100 Total number of peers : 2Peers in established se : 2第 14页PeerfRcvVASMs

27、gRcvdMsgSentOutQ Up/DownSe Pre10.0.2.2110.0.46.60410027270 00:24:16 Established4200340 00:00:53 EstablishedR4display bgp ipv6 peerBGP local router ID : 10.0.4.4Local AS number : 100Total number of peers : 2Peers in established se : 2PeerfRcvVASMsgRcvdMsgSentOutQ Up/DownSe Pre2000:212000:460604100272

28、60 00:24:41 Established4200890 00:06:22 Established4配置反射器步骤为了 BGP 路由能在 AS 100 内能够顺利传递，配置 R4 为 R2 的客户机，R5 为 R3 的客户机，R1 同时作为 R2 和 R3 的反射器。以 R1 为例。# 在 R1 上配置客户机R1bgp 100R1-bgppeer 10.0.2.2 reflect-c nt R1-bgppeer 10.0.3.3 reflect-c nt R1-bgpipv6-family unicastR1-bgp-af-ipv6peer 2000:2 reflect-c ntR1-bg

29、p-af-ipv6peer 2000:3 reflect-c nt结果验证# 查看 R1 的 BGP 邻居表（仅保留关键部分）R1display bgp peer 10.0.2.2 vere第 15页BGP Peer is 10.0.2.2, remote AS 100Type: IBGP linkBGP ver4, Remote router ID 10.0.2.2Authentication type configured: NoneLast keepalive received: 2018/09/29 19:43:36-08:00-08:00-08:00-08:00Last keepal

30、ive sent: 2018/09/29 19:43:37Last updateLast updatereceived: 2018/09/29 19:12:36sent: 2018/09/29 19:41:15Minimum route advertisementOptional capabilities:erval is 15 secondsRoute refresh capability has been enabled4-byte-as capability has been enabledConnect-erface has been configuredPereferred Valu

31、e: 0Routing policy configured:No routing policy is configuredR1dis bgp peer 10.0.3.3 vereBGP Peer is 10.0.3.3,remote AS 100Type: IBGP linkBGP ver4, Remote router ID 10.0.3.3Authentication type configured: NoneLast keepalive received: 2018/09/29 19:46:05-08:00-08:00-08:00-08:00Last keepalive sent: 20

32、18/09/29 19:46:06Last updateLast updatereceived: 2018/09/29 19:12:05sent: 2018/09/29 19:41:20Minimum route advertisementOptional capabilities:erval is 15 secondsRoute refresh capability has been enabled4-byte-as capability has been enabled Its route-reflector-cntConnect-erface has been configuredIts

33、route-reflector-c nt第 16页Pereferred Value: 0Routing policy configured:No routing policy is configure步骤 5 将相应的路由引入到 BGP，并使用 Community 属性按照要求进行路由过滤为了使得配置尽量简单，在配置之前需稍加规划。如，定义团体属性值 100:200 表示此路由不传递给 AS 200 ,100:400 表示不传递给 AS 400。# 在 R1 上配置路由策略，在引入 221.12.128.1/24 和 115.192.0.0/24 这两条路由时，附加上相应的 community

34、 属性。R1ip ip-prefix not_to_200 permit 115.192.0.0 24R1ip ip-prefix not_to_400 permit 221.12.128.0 24R1route-policymunity permit node 10Info: New Sequence of this List.R1-route-policyif-match ip-prefix not_to_200R1-route-policyapply community 100:200 additive R1-route-policyquitR1route-policymunity pe

35、rmit node 20Info: New Sequence of this List.R1-route-policyif-match ip-prefix not_to_400 R1-route-policyapply community 100:400 R1-route-policyquitR1route-policymunity permit node 30Info: New Sequence of this List.R1-route-policyquit R1bgp 100R1-bgppeer 10.0.2.2R1-bgppeer 10.0.3.3munitymunityR1-bgpn

36、etwork 115.192.0.0 24 route-policyR1-bgpnetwork 221.12.128.0 24 route-policyR1-bgpnetwork 10.0.1.1 32 R1-bgpipv6-family unicastR1-bgp-af-ipv6network 2000:0:0:11:1 64munitymunity# 在 R4 上配置相应的策略第 17页R4route-policymunity permit node 10R4-route-policy apply community 100:400R4-route-policyquitR4ip commu

37、nity-filter 10 deny 100:200 R4route-policy filter deny node 10R4-route-policyif-match community-filter 10 R4-route-policyquitR4route-policy filtermit node 20 R4-route-policyquitR4bgp 100R4-bgppeer 10.0.46.6 route-policymunity importR4-bgppeer 10.0.46.6 route-policy filter export结果验证：R6display bgp ro

38、uting-tableBGP Local router ID is 10.0.6.6Sus codes: * - valid, - best, d - damped,h - history, i -ernal, s - suppressed, S - StaleOrigin : i - IGP, e - EGP, ? -pleteTotal Number of Routes: 7NetworkNextHopMEDLocPrfPrefVal Path/Ogn*10.0.4.4/3210.0.7.7/3210.1.1.0/2410.1.6.0/2410.0.46.410.0.67.710.0.46

39、.40.0.0.0000000100i300i100ii00iR8display bgp routing-table*221.12.128.010.0.46.40100i*10.1.8.0/2410.0.67.70300 400i*115.192.0.0/2410.0.67.70300 400 10第 18页BGP Local router ID is 10.0.8.8Sus codes: * - valid, - best, d - damped,h - history, i -ernal, s - suppressed, S - StaleOrigin : i - IGP, e - EGP

40、, ? -pleteTotal Number of Routes: 8NetworkNextHopMEDLocPrfPrefVal Path/Ogn*0i*0i10.0.4.4/3210.0.78.70300 200 1010.0.7.7/3210.1.1.0/2410.0.78.710.0.58.510.0.78.70000300i100i300 200 10*10.1.8.0/240.0.0.000i*115.192.0.0/2410.0.58.50100i*221.12.128.010.0.78.70300 200 100i6路由聚合以及路径选择步骤在 R4 和 R5 进行 4 条指定路

41、由的聚合，聚合后的条目为 2000:0:0:70: /62，同时为了防止环路并且实现优先走 AS 200 的需求，需要进行明细路由的抑制以及属性的修改，以 R4 的配置为例。# 在 R4 上进行相应的配置R4ip ipv6-prefix aggregation permit 2000:0:0:72: 62 R4route-policy aggregation permit node 10R4-route-policyif-match ipv6 address prefix-list aggregation R4-route-policyapply local-preference 200R4-

42、route-policyquitR4route-policy aggregation permit node 20 R4-route-policyquitR4bgp 100*10.1.6.0/2410.0.78.70300 200i第 19页R4-bgpipv6-family unicastR4-bgp-af-ipv6aggregate 2000:0:0:70: 62 as-set licy aggregation-suppressed attribute-po结果验证：R1display bgp ipv6 routing-tableBGP Local router ID is 10.0.1.

43、1Sus codes: * - valid, - best, d - damped,h - history, i -ernal, s - suppressed, S - StaleOrigin : i - IGP, e - EGP, ? -pleteTotal Number of Routes: 4i Network : 2000:2 NextHop : 2000:2PrefixLen : 128LocPrfPrefVal: 100: 0MEDLabel: 0:Path/Ogn : ii Network : 2000:3 NextHop : 2000:3PrefixLen : 128LocPr

44、fPrefVal: 100: 0MEDLabel: 0:Path/Ogn : i* NetworkNextHop MEDLabel: 2000:0:0:11: : 0PrefixLen : 64LocPrf:PrefVal: 0:Path/Ogn : iPath/Ogn : 200 300 i*i Network : 2000:0:0:70:PrefixLen : 62NextHop : 2000:4LocPrf200MED:PrefVal0Label:第 20页步骤 7 负载分担配置在 R1 上配置 IBGP 邻居的负载分担功能，同时由于两条 10.1.7.0/24 路由的 AS_Path

45、属性内容不同，需要关闭形成负载分担时比较 AS_Path 属性的机制。R1bgp 100R1-bgpum load-balancing ibgp 2R1-bgpload-balancing as-path-ignoreR1-bgpquit结果验证R1display ip routing-tableRoute Flags: R - relay, D - download to fibRouting Tables: PublicDestinations : 32Routes : 34Destination/MaskProtoPre CostFlags NextHoperface0/0/0IBGP2

46、55 0RD10.0.58.8GigabitEthernet0/0/110.1.8.0/24IBGP255 0RD10.0.58.8GigabitEthernet0/0/1127.0.0.0/8127.0.0.1/32DirectDirect000000DD DD127.0.0.1127.0.0.1127.0.0.1127.0.0.1InLoInLo InLoInLoack0ack0 ack0ack0127.255.255.255/32 Direct 0255.255.255.255/32 Direct 0R1display bgp routing-tableBGP Local router

47、ID is 10.0.1.1Sus codes: * - valid, - best, d - damped,h - history, i -ernal, s - suppressed, S - StaleOrigin : i - IGP, e - EGP, ? -pleteTotal Number of Routes: 1210.1.7.0/24 IBGP255 0RD10.0.46.6GigabitEthernet第 21页*i*i* i *i*10.1.1.0/2410.1.6.0/2410.1.7.0/240.0.0.010.0.46.610.0.46.610.0.58.810.0.5

48、8.80.0.0.00.0.0.0000000000i200i200 300i400 300i400ii i10010010010010.1.8.0/24115.192.0.0/24221.12.128.00001.3 配置参考R1 的配置#sysname R1 #ipv6 #vlan batch 2 to 6 #ospfv3 1router-id 10.0.1.1 #firewall zone Local priority 15#erface Vlanif1ip address 221.12.128.1 255.255.255.0#erface Vlanif2ip address 115.1

49、92.0.1 255.255.255.01.3.1*i 10.0.7.7/3210.0.46.61000200 300i* i10.0.58.81000400 300i第 22页#erface Vlanif3ipv6 enableip address 10.1.1.1 255.255.255.0 ipv6 address 2000:0:0:11:1/64#erface Ethernet0/0/0 port link-type trunkport trunk allo#ss vlan 2 to 4094erface GigabitEthernet0/0/0ipv6 enableip addres

50、s 10.0.12.1 255.255.255.0ipv6 address 2000:1201/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0 #erface GigabitEthernet0/0/1 ipv6 enableip address 10.0.13.1 255.255.255.0ipv6 address 2000:1301/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0#erface Loipv6 enableack0ip address 10.0.1.1 255.255

51、.255.255ipv6 address 2000:1/32 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0第 23页#bgp 100router-id 10.0.1.1peer 10.0.2.2 as-number 100peer 10.0.2.2 connect-erface Loack0peer 10.0.3.3 as-number 100peer 10.0.3.3 connect-erface Loack0peer 2000:2 as-number 100peer 2000:2 connect-erface Loack0peer 2000

52、:3 as-number 100peer 2000:3 connect-erface Lo #ipv4-family unicast undo synchronizationnetwork 10.0.1.0 255.255.255.0network 10.0.1.1 255.255.255.255network 10.1.1.0 255.255.255.0ack0network 115.192.0.0 255.255.255.0 route-policymunitynetwork 221.12.128.0 route-policyum load-balancing ibgp 2load-bal

53、ancing as-path-ignore peer 10.0.2.2 enablemunitypeer 10.0.2.2 reflect-cpeer 10.0.2.2peer 10.0.3.3 enablepeer 10.0.3.3 reflect-cpeer 10.0.3.3 #ipv6-family unicastundo synchronizationntmunityntmunity第 24页network 2000:0:0:11: 64peer 2000:2 enablepeer 2000:2 reflect-cnt peer 2000:3 enablepeer 2000:3 ref

54、lect-cnt#ospf 1area 0.0.0.0 #route-policymunity permit node 10if-match ip-prefix not_to_200apply community 100:200 additive #route-policymunity permit node 20if-match ip-prefix not_to_400apply community 100:400 #route-policy#munity permit node 30ip ip-prefix not_to_200 index 10 permit 115.192.0.0 24

55、ip ip-prefix not_to_400 index 10 permit 221.12.128.0 24 #returnR2 的配置#sysname R2 #ipv6 #ospfv3 11.3.2第 25页router-id 10.0.2.2#erface GigabitEthernet0/0/0 ipv6 enableip address 10.0.12.2 255.255.255.0ipv6 address 2000:1202/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0 #erface GigabitEthernet0/0/

56、1 ipv6 enableip address 10.0.24.2 255.255.255.0ipv6 address 2000:2402/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0#erface Loipv6 enableack0ip address 10.0.2.2 255.255.255.255ipv6 address 2000:2/128 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0 #bgp 100router-id 10.0.2.2peer 10.0.1.1 as-numb

57、er 100peer 10.0.1.1 connect-erface Loack0peer 10.0.4.4 as-number 100peer 10.0.4.4 connect-erface Loack0peer 2000:1 as-number 100第 26页peer 2000:1 connect-erface Loack0peer 2000:4 as-number 100peer 2000:4 connect-erface Lo #ipv4-family unicast undo synchronizationnetwork 10.0.2.2 255.255.255.255peer 1

58、0.0.1.1 enableack0peer 10.0.1.1peer 10.0.4.4 enablepeer 10.0.4.4 reflect-cpeer 10.0.4.4 #ipv6-family unicast undo synchronization network 2000:2 128peer 2000:1 enablepeer 2000:4 enablepeer 2000:4 reflect-c#ospf 1area 0.0.0.0 #munityntmunityntroute-policy filter deny node 10if-match community-filter

59、10#route-policy filt#ermit node 20ip community-filter 10 permit 100:400#第 27页return1.3.3 R3 的配置#sysname R3 #ipv6 #ospfv3 1router-id 10.0.3.3 #erface GigabitEthernet0/0/0 ipv6 enableip address 10.0.13.3 255.255.255.0ipv6 address 2000:1303/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0 #erface Gi

60、gabitEthernet0/0/1 ipv6 enableip address 10.0.35.3 255.255.255.0ipv6 address 2000:3503/120 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0#erface Loipv6 enableack0ip address 10.0.3.3 255.255.255.255ipv6 address 2000:3/128 ospfv3 1 area 0.0.0.0ospf enable 1 area 0.0.0.0第 28页#bgp 100router-id 10.0.3.3